RE: Ignore multiple hosts with command line argumen ts

[Tom Sevy <tsevy () epx com>]

Yes you can.

snort <options> not (host 1.1.1.1 or host 2.1.1.1)

If starting snort from a script, add '\' as escape char before parens:

snort <options> not \(host 1.1.1.1 or host 2.1.1.1\)


-----Original Message-----
From: McKim, Tim [mailto:McKim () nsf org]
Sent: Monday, June 03, 2002 2:31 PM
To: Snort-Users (E-mail)
Subject: [Snort-users] Ignore multiple hosts with command line arguments


I am using the command line

snort <options> not host x.x.x.x to eliminate alerts from a host. My
question is:

Can you use the command line to ignore multiple hosts?

If yes, what is the syntax?

Tim McKim 

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users